One day a process was eating up 90% of my CPU time, and its name was RUNDLL32. Arg, I hate that ! That little program is used to start COM objects and other nuisances. So then I patched RUNDLL32 to write its startup arguments to the event log. Once you've installed this tool, you'll see entries like the following in the Event Viewer Application Log:
RUNDLL32.EXE: GetCommandLineW(): "C:\WINNT\System32\RUNDLL32.EXE" TWEAKUI.CPL,TweakMeUp
So you know what's up. I'm sorry I couldn't come up with a more reasonable name, but at that point I was simply annoyed.
Installation on Windows NT
Just extract rundll32.exe to your \winnt\system32 directory. Maybe you'll want to rename or backup your existing copy of rundll32.exe, you really should.
Installation on Windows 2000
Installation on Windows 2000 is a bit more tricky because of the stupid "System File Protection" stuff. Here's howto:
- Delete RUNDLL32.EXE from \winnt\system32\dllcache. This is a "master" directory for the \winnt\system32 files SFP keeps.
- Maybe you'll want to rename or backup your existing copy of rundll32.exe, you really should.
- Extract the files from the download archive to \winnt\system. You'll get a warning that rundll32.exe has been replaced, cancel that.
Note that the first step is vital, otherwise SFP will silently overwrite the patched version. Duh.
Installation on Windows XP
I have no idea, I don't use Windows XP.